Outbound Wiki

Article

GDPR Email Marketing: A Practical Compliance Checklist (2026)

migomail.com

Open at publisher

Quoted on this wiki

Every place a page here uses this source, in the order the words come in it.

  1. What is the difference between a GDPR unsubscribe and an erasure request? An unsubscribe stops marketing email — the subscriber's email address remains in your suppression list and their data may remain in your CRM for other legitimate purposes. An erasure request (right to be forgotten) requires you to delete all personal data you hold about the individual — from your email platform, CRM, analytics tools, and any other system — within 30 days. The only data you may retain after an erasure request is a suppression record (email address plus erasure date) to prevent the address from being re-added to your list. If a subscriber sends you an email asking you to "delete all my data," treat it as an erasure request regardless of whether they used that specific term. “For B2B email marketing to individually identifiable business contacts in the EU or UK, GDPR applies.” What are the fines for GDPR violations related to email marketing? GDPR fines are tiered: lower-tier violations can result in fines up to €10 million or 2% of global annual turnover, whichever is higher. Upper-tier violations — including processing personal data without a lawful basis, which covers sending marketing email without consent — can result in fines up to €20 million or 4% of global annual turnover, whichever is higher. UK GDPR provides for equivalent fines in GBP. The highest single fine issued to date was €1.2 billion against Meta in 2023. For email marketing specifically, fines have typically been issued for large-scale sending without consent, failure to honour unsubscribe requests, and inadequate consent mechanisms. Small businesses are not typically subject to maximum fines for first-time or inadvertent violations, but enforcement risk is real.

    In GDPR territorial scope

Quotes are verbatim and belong to their publishers. Where a quote has been translated, the original wording is kept below it.